$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa File: bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa (raw, json) Hash identifier: BI0N5YxgCpfTC3egPSvXL8hwEN6hAlUxRZEJy7PIJJ8= Subject key identifier: 5F:34:6E:5B:45:E4:5E:97:19:01:2C:90:58:68:14:10:18:C5:08:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333303FB90224B746CC9600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 2604:cb00:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:30:3f:b9:02:24:b7:46:cc:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=fff1a980-cd0a-4fbc-81a1-f42133e001db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:1f:63:2d:3e:fe:36:ce:5f:d9:65:fe:62: 31:9c:5a:5f:c3:ad:4e:a9:cb:e1:41:2f:60:34:1f: f2:47:4f:ee:4b:b9:ea:87:f4:90:5d:c6:43:01:47: 45:e9:92:6d:78:01:4f:9d:83:8c:fe:2f:eb:36:f6: c2:cf:af:6b:82:6c:00:e8:16:9d:18:b1:78:8b:4b: c3:1f:1b:2e:af:3a:79:94:f1:01:d4:e4:58:17:32: 24:b9:64:75:b8:d9:80:a9:d7:31:6c:b9:54:ed:fb: 95:98:e2:f8:8d:60:2b:03:13:48:be:8e:27:04:71: 8f:9e:87:5b:60:0f:46:9a:c6:0d:3f:d2:37:a2:da: a6:64:9b:1e:a6:a7:7d:d8:cc:ab:16:9b:0e:ad:45: ac:21:63:97:6b:48:1f:87:17:b2:13:56:1b:d4:65: ec:66:43:c4:85:9e:a5:09:fd:72:68:c0:5b:3c:27: 8d:08:fa:8b:e4:b5:24:c2:ea:ac:cb:74:b1:c2:d0: 3a:1f:ab:d5:f8:93:69:c0:c5:95:fb:97:f1:b0:54: 53:af:4f:e8:dc:1f:73:4f:cc:8b:21:e1:a7:f9:18: d4:9c:69:50:fd:4a:b6:b7:96:06:4c:d2:93:0c:8a: 88:e0:87:ef:ed:75:0b:0d:30:8a:f9:0d:b9:25:d6: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:34:6E:5B:45:E4:5E:97:19:01:2C:90:58:68:14:10:18:C5:08:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bc5a2f4b-a6fa-372a-b7b1-e98b65e51359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2604:cb00:39::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f9:db:0f:54:aa:d9:58:50:9a:d8:19:70:4e:4f:04:10:b0: ad:f1:50:02:26:f6:69:b9:84:c8:78:28:27:84:99:9d:aa:47: d7:a7:e0:1c:04:60:2f:f7:68:d5:80:33:80:2f:66:11:3b:2b: 0b:f4:39:e1:52:ed:0e:7f:50:a3:b6:c2:24:b0:c3:58:f3:d8: 07:90:da:63:2d:87:0e:a9:b4:83:78:10:f1:3e:9f:f8:a4:fa: 0b:a3:bf:00:d0:38:80:8e:0e:6e:f9:24:65:3b:e6:fa:5b:08: 22:8b:97:4c:e9:fa:e7:1d:be:82:be:17:cd:a0:58:d9:b0:38: 4f:77:f0:83:b3:95:72:4d:20:c7:76:06:57:91:d8:87:0e:65: 6c:c7:e3:43:82:a5:79:81:5f:b1:70:f9:3a:e5:38:f4:3b:5c: c5:61:38:15:67:79:17:a3:6f:f3:6f:99:cb:f3:42:54:ab:c1: db:ea:f9:57:a3:4b:cb:c7:c7:29:3c:ee:9a:95:2a:d4:53:9b: eb:9d:01:03:da:34:b4:e0:a0:4e:90:b1:0a:55:21:57:a2:88: 2d:42:dc:8c:64:a6:11:f4:43:34:07:81:86:b6:32:49:ba:fb: 58:f1:13:f8:83:bb:bc:6a:c4:51:49:67:5c:6a:3f:8d:d1:7f: bd:e9:6e:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEVTMzA/uQIkt0bMlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk ZmZmMWE5ODAtY2QwYS00ZmJjLTgxYTEtZjQyMTMzZTAwMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqYfYy0+/jbOX9ll/mIxnFpfw61OqcvhQS9g NB/yR0/uS7nqh/SQXcZDAUdF6ZJteAFPnYOM/i/rNvbCz69rgmwA6BadGLF4i0vD Hxsurzp5lPEB1ORYFzIkuWR1uNmAqdcxbLlU7fuVmOL4jWArAxNIvo4nBHGPnodb YA9GmsYNP9I3otqmZJsepqd92MyrFpsOrUWsIWOXa0gfhxeyE1Yb1GXsZkPEhZ6l Cf1yaMBbPCeNCPqL5LUkwuqsy3SxwtA6H6vV+JNpwMWV+5fxsFRTr0/o3B9zT8yL IeGn+RjUnGlQ/Uq2t5YGTNKTDIqI4Ifv7XULDTCK+Q25JdbeGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF80bltF5F6XGQEskFhoFBAYxQgSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmM1YTJmNGItYTZmYS0z NzJhLWI3YjEtZTk4YjY1ZTUxMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgTLAAA5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD352w9UqtlYUJrYGXBOTwQQsK3xUAIm9mm5hMh4KCeEmZ2qR9en 4BwEYC/3aNWAM4AvZhE7Kwv0OeFS7Q5/UKO2wiSww1jz2AeQ2mMthw6ptIN4EPE+ n/ik+gujvwDQOICODm75JGU75vpbCCKLl0zp+ucdvoK+F82gWNmwOE938IOzlXJN IMd2BleR2IcOZWzH40OCpXmBX7Fw+TrlOPQ7XMVhOBVneRejb/NvmcvzQlSrwdvq +VejS8vHxyk87pqVKtRTm+udAQPaNLTgoE6QsQpVIVeiiC1C3IxkphH0QzQHgYa2 Mkm6+1jxE/iDu7xqxFFJZ1xqP43Rf73pbqU= -----END CERTIFICATE-----Generated at Thu May 23 20:12:05 2024 by rpki-client on console-ams.rpki-client.org